An5506 02 B Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-38814 MEDIUM POC This Month

A stored cross-site scripting (XSS) vulnerability in the auth_settings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS An5506 02 B Firmware

NVD

CVSS 3.1

5.4

EPSS

2.5%

CVE-2021-42912 HIGH Act Now

FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 13.8% and no vendor patch available.

Command Injection An5506 01 A Firmware An5506 01 B Firmware An5506 02 B Firmware An5506 04 B Firmware +2

NVD VulDB

CVSS 3.1

8.8

EPSS

13.8%

CVE-2022-38814

EPSS 3% CVSS 5.4

MEDIUM POC This Month

XSS An5506 02 B Firmware

NVD

CVE-2021-42912

EPSS 14% CVSS 8.8

HIGH Act Now

Command Injection An5506 01 A Firmware An5506 01 B Firmware +4

NVD VulDB